TLDR: RedSonic Vault lost 9.25 ETH after an attacker exploited a dual-asset pricing flaw entirely. A permissionless registerErc20 function let the attacker add a second, conflicting stETH share class. The attacker flash-loaned 1,139 WETH from Balancer and needed zero starting capital of their own. ExVulSec traced the full exploit…
Read More